Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/eBXDlZsuj2PfEXE3-RjRT7_IBxg.roa
File: eBXDlZsuj2PfEXE3-RjRT7_IBxg.roa (raw, json)
Hash identifier: +WyA134Z4TIKmOe9YE1fO9KxCnKYYof312SAWiGKh+4=
Subject key identifier: 78:15:C3:95:9B:2E:8F:63:DF:11:71:37:F9:18:D1:4F:BF:C8:07:18
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 01907CF019101C296345A72D1FC4E761EDDE
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/eBXDlZsuj2PfEXE3-RjRT7_IBxg.roa
Signing time: Thu 04 Jul 2024 08:50:28 +0000
ROA not before: Thu 04 Jul 2024 08:50:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41085
IP address blocks: 195.189.100.0/22 maxlen: 22
195.189.100.0/23 maxlen: 24
195.189.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 07:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:f0:19:10:1c:29:63:45:a7:2d:1f:c4:e7:61:ed:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Jul 4 08:50:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7815c3959b2e8f63df117137f918d14fbfc80718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:b9:75:75:6d:9f:38:6a:f1:02:37:71:2a:
7f:5b:90:56:55:4f:a0:ad:c3:d6:50:76:f3:5c:af:
a7:b0:7b:e3:02:2d:eb:84:87:57:9c:3e:08:cb:7f:
a0:41:65:35:9a:16:6a:9a:26:2a:91:a7:08:8e:59:
74:5e:c0:fc:1e:5c:89:19:45:92:fe:23:9e:2f:cf:
48:3b:4c:a1:3a:7a:d8:cb:5c:6a:eb:a5:88:b2:3a:
8f:52:fd:4a:21:85:36:46:73:d9:93:13:4f:57:7d:
e9:7d:8b:4f:d2:3d:2b:86:b0:1e:95:03:3e:e8:57:
64:6b:b8:62:a7:09:2d:d3:9f:c9:58:c2:13:88:15:
40:76:35:51:36:a4:ce:aa:a7:ae:7e:1a:3c:bc:a7:
b5:a7:ab:d9:f9:c5:3c:79:e9:ab:6f:00:67:4d:9d:
52:97:dc:c5:34:d2:66:49:9d:53:70:93:54:46:dc:
ff:22:13:65:fa:ff:bb:d3:c0:cb:c1:71:1e:7c:ba:
ed:7e:c1:28:07:60:11:d4:06:ac:36:db:c9:35:12:
1f:67:8c:b9:04:8f:d9:52:cf:5f:bf:3c:01:57:04:
e9:fd:d4:95:11:09:7d:82:13:2f:ed:dd:78:26:91:
cc:13:da:28:ae:30:38:ed:65:49:4d:de:be:86:1a:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:15:C3:95:9B:2E:8F:63:DF:11:71:37:F9:18:D1:4F:BF:C8:07:18
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/eBXDlZsuj2PfEXE3-RjRT7_IBxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.100.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a5:ba:88:2d:2e:b4:b6:7d:0e:d9:e5:34:70:ef:3c:63:d9:
83:7d:34:b8:85:32:5d:94:af:88:3f:15:9f:66:18:0e:4b:dd:
71:24:5a:51:48:2d:44:27:b7:90:0c:0d:5d:8d:a6:e9:8b:a2:
bf:73:96:75:d6:99:7d:b1:d1:5a:0e:d8:69:28:a7:48:a7:67:
f1:ae:bb:e1:f4:69:fa:eb:24:0f:38:a0:12:bd:e4:72:c6:20:
77:ba:9d:b0:80:7f:ca:31:f4:67:19:75:c9:34:30:41:a4:25:
73:97:ab:c9:d9:7a:b7:dd:c6:cd:29:1b:f9:27:59:0e:9a:36:
81:7c:77:78:24:57:40:a3:0b:b6:ab:17:12:07:cc:0f:5b:06:
c4:8e:20:12:e7:96:20:74:37:6a:3a:92:c5:8e:61:6f:d5:47:
e3:b7:40:bc:44:9d:ed:78:f2:5b:1b:25:f3:a6:ae:d5:fb:1e:
78:6e:f6:df:20:2f:c1:ce:db:44:22:57:21:54:0b:cc:bc:ec:
ed:a2:5d:d6:af:e6:77:90:21:e6:47:16:f0:90:af:5a:06:29:
3d:14:ef:ae:44:62:ca:84:d2:b5:26:49:7f:75:d3:ba:90:6d:
96:55:24:5d:40:6a:0a:4b:52:42:61:b5:d7:ba:da:e3:7b:ca:
f9:41:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:47 2025 by rpki-client